Hello Tom, and thanks again for your advices. I answer each question down:
El 19/02/2010 15:58, Tom Eastep escribió:
> Miguel A. Velasco wrote:
>
>> I have tried running shorewall with this config but I
>> haven´t internet access. Even I can´t ping from the
>> firewall to 10.10.90.3 or 10.10.100.3 ....
>> ¿Any idea?
>
> Yes -- just forget my suggestion.
>
>
>>
>> At this point what do you suggest me? I mean: as you say the
>> problem is not in shorewall config and isn´t on the windows
>> machine (pptp client) because I am able to connect this Server
>> directly to pptp server, avoiding shorewall firewall
>
> I keep trying to tell you that you are avoiding *double NAT* when you
> connect directly. I suspect that is the problem and it may not be
> solvable; I don't know. The trace log you sent (which STILL DIDN'T USE
> THE -n OPTION) shows both TCP and GRE traffic flowing in both
> directions. So there is nothing more that I know of that you can expect
> the firewall to do.
Following your instrucctions, I´m going to try to configure my
adsl router as a bridge and avoiding double NAT.
Secondly, if it doesn´t work I´ll try to remove the pptp
conntrack and nat helper modules as you comment.
>
>> (connecting through the adsl router ...).
>> Then, when you say it´s a PPTP issue what do you exactly
>> refer?.
>
> See above. You need to get help from PPTP experts, not Firewall experts.
>
> -Tom
I´ll send to the list the consequences of my corrections.
Thanks very much for your help and thanks to Shorewall Team for his
great work with this Firewall.
Miguel A. Velasco
------------------------------------------------------------------------------
Download Intel® Parallel Studio Eval
Try the new software tools for yourself. Speed compiling, find bugs
proactively, and fine-tune applications for parallel performance.
See why Intel Parallel Studio got high marks during beta.
http://p.sf.net/sfu/intel-sw-dev
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users
